Multi-way transaction related data exchange apparatus and methods

• US 8,862,518 B2
• Filed: 10/12/2010
• Issued: 10/14/2014
• Est. Priority Date: 05/14/2004
• Status: Active Grant

• Current Assignee: Peter N. Ching
• Original Assignee: Peter N. Ching
• Inventors: Ching, Peter N.
• Primary Examiner(s): CHEUNG, CALVIN K
• Application Number:
  US12/903,107
• Publication Number:
  US 20110035321A1
• Time in Patent Office: 1,463 Days
• Field of Search: 705 64- 67, 705/76
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 40/04 Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

Methods and apparatus for conducting electronic transactions such as commerce transactions or purchases and exchanging related information. In one aspect, a robust and integrated apparatus and associated method is provided whereby a purchaser can securely provide transaction data and/or information in an electronic format to another party such as a vendor. In one exemplary embodiment, the purchaser can authenticate his or her right to use the billing information contained therein to complete a purchase without actually having to disclose the billing information in a human readable format, thereby enabling the vendor to obtain and authenticate the purchaser'"'"'s identity and billing information while still protecting the purchaser'"'"'s privacy, and without requiring disclosure of the purchaser'"'"'s billing information to the vendor'"'"'s employees or any other parties. In another aspect, the vendor can provide information about the transaction in an electronic form that can be authenticated and verified for accuracy.

Claims

1. An apparatus configured to allow a second party to authenticate a right of a user of a data transfer device to complete a transaction at a point of sale device associated with said second party, said apparatus comprising:

a first data interface configured to communicate with said data transfer device;

a second data interface configured to communicate with said point of sale device; and

computerized logic in data communication with said first data interface and said second data interface, said computerized logic configured to cause said apparatus to;

receive from said first data interface encrypted transaction information held in storage at said data transfer device, said transaction information comprising at least authentication data identifying one or more parties authorized to use said data transfer device;

authenticate said right of said user of said data transfer device to decrypt a first portion of said encrypted transaction information by comparing a decrypted second portion of said encrypted authentication data stored at said data transfer device to identity data obtained from said user of said data transfer device; and

upon authentication of said user;

provide at least said decrypted first portion of said encrypted transaction information to said point of sale to complete said transaction via said second data interface; and

transmit via said first data interface a record of said completed transaction for storage on said data transfer device, said record comprising at least one data structure received from said point of sale device comprising at least an encrypted indicator of a hashed electronic receipt.

2. The apparatus of claim 1, wherein said apparatus is configured to provide said authentication using at least dual key encryption.

3. The apparatus of claim 2, wherein said apparatus is further configured to provide validation of at least a portion of said transaction information using at least a one-way hash algorithm.

4. The apparatus of claim 1, wherein said authentication requires said second party to physically possess said data transfer device.

5. The apparatus of claim 1, wherein said at least one data structure comprises information relating to at least one of a vendor name, a date of said transaction, a list of items purchased, buyer preferences, medical records, automobile service history.

6. A method for securely providing transaction information in an electronic format via a data transfer device, comprising:

storing transaction information on said data transfer device, said transaction information comprising authentication data identifying one or more parties authorized to use said data transfer device;

providing said transaction information from said data transfer device associated with a current one of said one or more parties to a point of sale device associated with a first party;

collecting, via said data transfer device, identity data associated with said current one of said one or more parties;

providing said identity data to said point of sale device associated with said first party;

authenticating a right of said current one of said one or more parties, at said point of sale device, to access a restricted portion of transaction information stored on said data transfer device, said restricted portion of transaction information being used to complete a transaction by comparing said authentication data to said identity data;

completing said transaction, when said current one of said one or more parities is authenticated to access said restricted portion of said transaction infolination stored on said data transfer device to complete said transaction; and

storing a record of said completed transaction on said data transfer device, said record comprising at least one data structure generated by said point of sale device comprising at least an encrypted indicator of a hashed electronic receipt.

7. The method of claim 6, wherein said act of authenticating utilizes at least dual key encryption.

8. The method of claim 7, wherein said act of authenticating further comprises providing validation of at least a portion of said transaction information using at least a one-way hash algorithm.

9. The method of claim 6, wherein said act of authenticating requires said second party to physically possess said data transfer device.

10. The method of claim 6, wherein said data structure comprises information relating to at least one of a vendor name, a date of said transaction, a list of items purchased, buyer preferences, medical records, automobile service history.